> Source: [sk168177](https://support.checkpoint.com/results/sk/sk168177)

# sk168177 - High CPU utilization and/or sporadic traffic latency on environments with DCE-RPC connections 

| Property | Value |
|----------|-------|
| Solution ID | sk168177 |
| Date Created | 2020-07-21 |
| Last Modified | 2020-07-23 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * High CPU utilization and/or sporadic traffic latency on environments with DCE-RPC connections.

* The output of 'fw ctl pstat -m' shows a high number of "Multik message kernel" or "Multik message user" events.

* The output of the following command:` 'fw tab | grep 'local sync' -B 1 | grep -v 'local sync' | awk 'NF {print $2}' | xargs -i fw tab -t {} -s'` shows a high number of entries for 'dcerpc_maps' , 'dcerpc_rmaps' and/or 'dcerpc_epm_requests'.

* All other standard performance optimization and analysis steps have already been done on the environment but the issue persists.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content